CriticalFix available
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
Type: advisorySources: OSV
- Products
- eap7-apache-cxf, eap7-apache-cxf-rt, eap7-apache-cxf-services, eap7-apache-cxf-tools, eap7-jackson-databind, eap7-jettison, eap7-netty, eap7-netty-all, eap7-resteasy, eap7-resteasy-atom-provider, eap7-resteasy-cdi, eap7-resteasy-client, eap7-resteasy-crypto, eap7-resteasy-jackson-provider, eap7-resteasy-jackson2-provider, eap7-resteasy-jaxb-provider, eap7-resteasy-jaxrs, eap7-resteasy-jettison-provider, eap7-resteasy-jose-jwt, eap7-resteasy-jsapi, eap7-resteasy-json-p-provider, eap7-resteasy-multipart-provider, eap7-resteasy-spring, eap7-resteasy-validator-provider-11, eap7-resteasy-yaml-provider, eap7-snakeyaml, eap7-velocity, eap7-wildfly, eap7-wildfly-modules
- Affected versions
- Not specified
- Fixed versions
- 0:1.3.8-2.redhat_00002.1.ep7.el7, 0:1.33.0-1.SP1_redhat_00001.1.ep7.el7, 0:1.7.0-3.redhat_00006.1.ep7.el7, 0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7, 0:3.0.27-1.Final_redhat_00001.1.ep7.el7, 0:3.1.16-4.redhat_00003.1.ep7.el7, 0:4.1.63-1.Final_redhat_00002.1.ep7.el7, 0:7.1.9-2.GA_redhat_00002.1.ep7.el7
- CVEs
- CVE-2020-10672, CVE-2020-10673, CVE-2020-13936, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2021-3717, CVE-2021-44228, CVE-2021-45046, CVE-2022-1471, CVE-2022-41881, CVE-2022-42003, CVE-2022-42004, CVE-2022-42889, CVE-2022-45047, CVE-2022-45693, CVE-2022-46363
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 11:56 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
core-osv · Original sourcePublished 24 Feb 2025, 10:02 UTC
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
osv:RHSA-2025:1746
eap7-jackson-databind
Fixed versions: 0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7
eap7-resteasy
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-atom-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-cdi
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-client
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-crypto
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jackson-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jackson2-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jaxb-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jaxrs
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jettison-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jose-jwt
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-jsapi
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-json-p-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-multipart-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-spring
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-validator-provider-11
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-resteasy-yaml-provider
Fixed versions: 0:3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-velocity
Fixed versions: 0:1.7.0-3.redhat_00006.1.ep7.el7
eap7-wildfly
Fixed versions: 0:7.1.9-2.GA_redhat_00002.1.ep7.el7
eap7-wildfly-modules
Fixed versions: 0:7.1.9-2.GA_redhat_00002.1.ep7.el7
eap7-apache-cxf
Fixed versions: 0:3.1.16-4.redhat_00003.1.ep7.el7
eap7-apache-cxf-rt
Fixed versions: 0:3.1.16-4.redhat_00003.1.ep7.el7
eap7-apache-cxf-services
Fixed versions: 0:3.1.16-4.redhat_00003.1.ep7.el7
eap7-apache-cxf-tools
Fixed versions: 0:3.1.16-4.redhat_00003.1.ep7.el7
eap7-jettison
Fixed versions: 0:1.3.8-2.redhat_00002.1.ep7.el7
eap7-netty
Fixed versions: 0:4.1.63-1.Final_redhat_00002.1.ep7.el7
eap7-netty-all
Fixed versions: 0:4.1.63-1.Final_redhat_00002.1.ep7.el7
eap7-snakeyaml
Fixed versions: 0:1.33.0-1.SP1_redhat_00001.1.ep7.el7
Complete source record
{
"id": "862965700800398fa971478ec89c694d69a3ad9ca5b51a877359a7b0e77122d9",
"url": "https://osv.dev/vulnerability/RHSA-2025%3A1746",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update",
"summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update",
"evidence": "osv:RHSA-2025:1746",
"products": [
{
"name": {
"value": "eap7-jackson-databind",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-atom-provider",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-cdi",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-client",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-crypto",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jackson-provider",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jackson2-provider",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jaxb-provider",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jaxrs",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jettison-provider",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jose-jwt",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-jsapi",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-json-p-provider",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-multipart-provider",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-spring",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-validator-provider-11",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-resteasy-yaml-provider",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-velocity",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.0-3.redhat_00006.1.ep7.el7",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-wildfly",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.1.9-2.GA_redhat_00002.1.ep7.el7",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-wildfly-modules",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.1.9-2.GA_redhat_00002.1.ep7.el7",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-apache-cxf",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.16-4.redhat_00003.1.ep7.el7",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-apache-cxf-rt",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.16-4.redhat_00003.1.ep7.el7",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-apache-cxf-services",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.16-4.redhat_00003.1.ep7.el7",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-apache-cxf-tools",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.16-4.redhat_00003.1.ep7.el7",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-jettison",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.3.8-2.redhat_00002.1.ep7.el7",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-netty",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.1.63-1.Final_redhat_00002.1.ep7.el7",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-netty-all",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.1.63-1.Final_redhat_00002.1.ep7.el7",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap7-snakeyaml",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.33.0-1.SP1_redhat_00001.1.ep7.el7",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "RHSA-2025:1746",
"aliases": [
"RHSA-2025:1746"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-jackson-databind",
"purl": "pkg:rpm/redhat/eap7-jackson-databind",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy",
"purl": "pkg:rpm/redhat/eap7-resteasy",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-atom-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-cdi",
"purl": "pkg:rpm/redhat/eap7-resteasy-cdi",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-client",
"purl": "pkg:rpm/redhat/eap7-resteasy-client",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-crypto",
"purl": "pkg:rpm/redhat/eap7-resteasy-crypto",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jackson-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jackson2-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jaxb-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jaxrs",
"purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jettison-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jose-jwt",
"purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-jsapi",
"purl": "pkg:rpm/redhat/eap7-resteasy-jsapi",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-json-p-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-multipart-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-spring",
"purl": "pkg:rpm/redhat/eap7-resteasy-spring",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-validator-provider-11",
"purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.27-1.Final_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-resteasy-yaml-provider",
"purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.0-3.redhat_00006.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-velocity",
"purl": "pkg:rpm/redhat/eap7-velocity",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.1.9-2.GA_redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-wildfly",
"purl": "pkg:rpm/redhat/eap7-wildfly",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.1.9-2.GA_redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-wildfly-modules",
"purl": "pkg:rpm/redhat/eap7-wildfly-modules",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.16-4.redhat_00003.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-apache-cxf",
"purl": "pkg:rpm/redhat/eap7-apache-cxf",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.16-4.redhat_00003.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-apache-cxf-rt",
"purl": "pkg:rpm/redhat/eap7-apache-cxf-rt",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.16-4.redhat_00003.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-apache-cxf-services",
"purl": "pkg:rpm/redhat/eap7-apache-cxf-services",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.16-4.redhat_00003.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-apache-cxf-tools",
"purl": "pkg:rpm/redhat/eap7-apache-cxf-tools",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.3.8-2.redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-jettison",
"purl": "pkg:rpm/redhat/eap7-jettison",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.1.63-1.Final_redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-netty",
"purl": "pkg:rpm/redhat/eap7-netty",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.1.63-1.Final_redhat_00002.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-netty-all",
"purl": "pkg:rpm/redhat/eap7-netty-all",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.33.0-1.SP1_redhat_00001.1.ep7.el7"
}
]
}
],
"package": {
"name": "eap7-snakeyaml",
"purl": "pkg:rpm/redhat/eap7-snakeyaml",
"ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.1::el7"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:1746.json"
}
}
],
"modified": "2026-10-14T10:08:34Z",
"provider": "osv",
"upstream": [
"CVE-2020-10672",
"CVE-2020-10673",
"CVE-2020-13936",
"CVE-2020-8840",
"CVE-2020-9546",
"CVE-2020-9547",
"CVE-2020-9548",
"CVE-2021-3717",
"CVE-2021-44228",
"CVE-2021-45046",
"CVE-2022-1471",
"CVE-2022-41881",
"CVE-2022-42003",
"CVE-2022-42004",
"CVE-2022-42889",
"CVE-2022-45047",
"CVE-2022-45693",
"CVE-2022-46363"
],
"references": [
"https://access.redhat.com/errata/RHSA-2025:1746",
"https://access.redhat.com/security/updates/classification/#critical",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index",
"https://bugzilla.redhat.com/show_bug.cgi?id=1815470",
"https://bugzilla.redhat.com/show_bug.cgi?id=1815495",
"https://bugzilla.redhat.com/show_bug.cgi?id=1816330",
"https://bugzilla.redhat.com/show_bug.cgi?id=1816332",
"https://bugzilla.redhat.com/show_bug.cgi?id=1816337",
"https://bugzilla.redhat.com/show_bug.cgi?id=1816340",
"https://bugzilla.redhat.com/show_bug.cgi?id=1937440",
"https://bugzilla.redhat.com/show_bug.cgi?id=1991305",
"https://bugzilla.redhat.com/show_bug.cgi?id=2030932",
"https://bugzilla.redhat.com/show_bug.cgi?id=2032580",
"https://bugzilla.redhat.com/show_bug.cgi?id=2135244",
"https://bugzilla.redhat.com/show_bug.cgi?id=2135247",
"https://bugzilla.redhat.com/show_bug.cgi?id=2135435",
"https://bugzilla.redhat.com/show_bug.cgi?id=2145194",
"https://bugzilla.redhat.com/show_bug.cgi?id=2150009",
"https://bugzilla.redhat.com/show_bug.cgi?id=2153379",
"https://bugzilla.redhat.com/show_bug.cgi?id=2155681",
"https://bugzilla.redhat.com/show_bug.cgi?id=2155970",
"https://issues.redhat.com/browse/JBEAP-28583",
"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1746.json",
"https://access.redhat.com/security/cve/CVE-2020-8840",
"https://www.cve.org/CVERecord?id=CVE-2020-8840",
"https://nvd.nist.gov/vuln/detail/CVE-2020-8840",
"https://access.redhat.com/security/cve/CVE-2020-9546",
"https://www.cve.org/CVERecord?id=CVE-2020-9546",
"https://nvd.nist.gov/vuln/detail/CVE-2020-9546",
"https://access.redhat.com/security/cve/CVE-2020-9547",
"https://www.cve.org/CVERecord?id=CVE-2020-9547",
"https://nvd.nist.gov/vuln/detail/CVE-2020-9547",
"https://access.redhat.com/security/cve/CVE-2020-9548",
"https://www.cve.org/CVERecord?id=CVE-2020-9548",
"https://nvd.nist.gov/vuln/detail/CVE-2020-9548",
"https://access.redhat.com/security/cve/CVE-2020-10672",
"https://www.cve.org/CVERecord?id=CVE-2020-10672",
"https://nvd.nist.gov/vuln/detail/CVE-2020-10672",
"https://access.redhat.com/security/cve/CVE-2020-10673",
"https://www.cve.org/CVERecord?id=CVE-2020-10673",
"https://nvd.nist.gov/vuln/detail/CVE-2020-10673",
"https://access.redhat.com/security/cve/CVE-2020-13936",
"https://www.cve.org/CVERecord?id=CVE-2020-13936",
"https://nvd.nist.gov/vuln/detail/CVE-2020-13936",
"https://access.redhat.com/security/cve/CVE-2021-3717",
"https://www.cve.org/CVERecord?id=CVE-2021-3717",
"https://nvd.nist.gov/vuln/detail/CVE-2021-3717",
"https://access.redhat.com/security/cve/CVE-2021-44228",
"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009",
"https://www.cve.org/CVERecord?id=CVE-2021-44228",
"https://nvd.nist.gov/vuln/detail/CVE-2021-44228",
"https://github.com/advisories/GHSA-jfh8-c2jp-5v3q",
"https://logging.apache.org/log4j/2.x/security.html",
"https://www.lunasec.io/docs/blog/log4j-zero-day/",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"https://access.redhat.com/security/cve/CVE-2021-45046",
"https://www.cve.org/CVERecord?id=CVE-2021-45046",
"https://nvd.nist.gov/vuln/detail/CVE-2021-45046",
"https://www.openwall.com/lists/oss-security/2021/12/14/4",
"https://access.redhat.com/security/cve/CVE-2022-1471",
"https://www.cve.org/CVERecord?id=CVE-2022-1471",
"https://nvd.nist.gov/vuln/detail/CVE-2022-1471",
"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
"https://access.redhat.com/security/cve/CVE-2022-41881",
"https://www.cve.org/CVERecord?id=CVE-2022-41881",
"https://nvd.nist.gov/vuln/detail/CVE-2022-41881",
"https://access.redhat.com/security/cve/CVE-2022-42003",
"https://www.cve.org/CVERecord?id=CVE-2022-42003",
"https://nvd.nist.gov/vuln/detail/CVE-2022-42003",
"https://access.redhat.com/security/cve/CVE-2022-42004",
"https://www.cve.org/CVERecord?id=CVE-2022-42004",
"https://nvd.nist.gov/vuln/detail/CVE-2022-42004",
"https://access.redhat.com/security/cve/CVE-2022-42889",
"https://www.cve.org/CVERecord?id=CVE-2022-42889",
"https://nvd.nist.gov/vuln/detail/CVE-2022-42889",
"https://blogs.apache.org/security/entry/cve-2022-42889",
"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om",
"https://seclists.org/oss-sec/2022/q4/22",
"https://access.redhat.com/security/cve/CVE-2022-45047",
"https://www.cve.org/CVERecord?id=CVE-2022-45047",
"https://nvd.nist.gov/vuln/detail/CVE-2022-45047",
"https://www.mail-archive.com/dev@mina.apache.org/msg39312.html",
"https://access.redhat.com/security/cve/CVE-2022-45693",
"https://www.cve.org/CVERecord?id=CVE-2022-45693",
"https://nvd.nist.gov/vuln/detail/CVE-2022-45693",
"https://access.redhat.com/security/cve/CVE-2022-46363",
"https://www.cve.org/CVERecord?id=CVE-2022-46363",
"https://nvd.nist.gov/vuln/detail/CVE-2022-46363",
"https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c"
]
},
"related_cves": [
{
"value": "CVE-2020-10672",
"evidence": "/upstream"
},
{
"value": "CVE-2020-10673",
"evidence": "/upstream"
},
{
"value": "CVE-2020-13936",
"evidence": "/upstream"
},
{
"value": "CVE-2020-8840",
"evidence": "/upstream"
},
{
"value": "CVE-2020-9546",
"evidence": "/upstream"
},
{
"value": "CVE-2020-9547",
"evidence": "/upstream"
},
{
"value": "CVE-2020-9548",
"evidence": "/upstream"
},
{
"value": "CVE-2021-3717",
"evidence": "/upstream"
},
{
"value": "CVE-2021-44228",
"evidence": "/upstream"
},
{
"value": "CVE-2021-45046",
"evidence": "/upstream"
},
{
"value": "CVE-2022-1471",
"evidence": "/upstream"
},
{
"value": "CVE-2022-41881",
"evidence": "/upstream"
},
{
"value": "CVE-2022-42003",
"evidence": "/upstream"
},
{
"value": "CVE-2022-42004",
"evidence": "/upstream"
},
{
"value": "CVE-2022-42889",
"evidence": "/upstream"
},
{
"value": "CVE-2022-45047",
"evidence": "/upstream"
},
{
"value": "CVE-2022-45693",
"evidence": "/upstream"
},
{
"value": "CVE-2022-46363",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 315673,
"published_at": "2025-02-24T10:02:47+00:00"
}